Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6174af25-52f7-302d-9608-f35e6b4edb22.roa
File: 6174af25-52f7-302d-9608-f35e6b4edb22.roa (raw, json)
Hash identifier: w3CegPr4lSEj2vvM7Lg1FTFS+EKc5R/2ZwPMzz6UUkQ=
Subject key identifier: F6:71:E9:0B:CC:CC:62:A0:AD:2D:6C:3B:11:4B:81:2F:8F:19:37:CB
Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial: 010D0C9F4328584957C703038071E89839217C80
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6174af25-52f7-302d-9608-f35e6b4edb22.roa
Signing time: Fri 28 Mar 2025 23:30:08 +0000
ROA not before: Fri 28 Mar 2025 23:30:08 +0000
ROA not after: Thu 26 Jun 2025 23:30:08 +0000
asID: 22351
IP address blocks: 64.88.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:c7:03:03:80:71:e8:98:39:21:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Validity
Not Before: Mar 28 23:30:08 2025 GMT
Not After : Jun 26 23:30:08 2025 GMT
Subject: CN=3502a6d1-c512-42ad-b8ad-c77874bd675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:5c:64:9d:ba:6e:af:1c:ce:fa:f9:e5:23:
7e:19:9c:be:75:21:a3:02:5d:fb:04:2d:1f:6b:31:
62:ce:5d:9d:f0:7d:cd:08:f0:b2:30:b8:65:14:5b:
09:51:d1:86:89:43:e9:ad:ea:fc:29:2b:69:17:12:
59:1d:6f:1a:6a:dd:b0:64:2b:b2:fd:b8:f1:2b:a3:
78:4c:4c:22:2f:f1:8b:34:80:7d:a6:22:e5:e1:25:
61:52:a0:b5:2b:8b:7e:6a:7d:fe:6d:98:11:3b:b9:
c6:61:f9:90:b6:ca:85:d5:19:d0:93:79:20:ac:70:
db:da:05:29:b5:40:06:50:c6:c6:57:3c:54:a2:9a:
f3:cc:76:56:9d:55:c6:c1:e7:59:2e:f2:9e:0d:e7:
1a:52:2e:01:75:da:a3:47:0b:0b:06:de:8e:ac:34:
45:1a:43:96:8d:b9:81:ba:16:5d:62:b1:a7:24:3a:
f7:72:be:ab:8d:f8:2a:49:e8:23:2f:16:16:79:7a:
f6:f9:a6:5e:80:04:fc:33:a5:0e:d5:07:09:75:27:
97:84:76:ea:f8:ba:04:35:bf:ec:4b:77:11:65:d7:
8c:ec:be:52:56:c2:ad:e0:6a:34:42:cd:55:f4:86:
e6:68:7b:3f:67:39:59:bc:01:d6:0c:a7:cc:1d:09:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:E9:0B:CC:CC:62:A0:AD:2D:6C:3B:11:4B:81:2F:8F:19:37:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6174af25-52f7-302d-9608-f35e6b4edb22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
X509v3 Authority Key Identifier:
keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
sbgp-ipAddrBlock: critical
IPv4:
64.88.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:1c:10:d1:44:92:b1:a7:55:e1:d0:fd:2f:ea:96:34:67:65:
a9:27:b0:27:fc:07:79:67:9d:4e:bc:5d:ef:53:82:32:b9:21:
7c:4c:6f:3b:87:8f:d3:5d:e4:69:89:d1:c3:82:ae:77:d7:38:
44:01:42:84:00:df:f9:32:1d:45:90:af:df:ba:69:16:3b:9f:
85:44:6a:06:e9:e9:25:24:4f:dd:2e:10:84:cc:7a:4f:ce:92:
82:ea:75:f1:cf:05:ca:27:9f:4b:18:e1:21:8f:89:73:6e:ed:
42:69:43:18:56:e1:ab:73:36:c5:41:48:82:92:26:5f:c8:90:
15:6a:c5:d3:c3:67:59:92:2c:3e:8d:0b:ac:d6:d6:f4:00:95:
74:85:1d:6d:41:a4:10:b6:56:28:8f:2b:61:9f:f2:ba:8b:5f:
d2:b3:65:1a:90:fd:e7:e1:5d:0f:bb:23:fb:76:b1:06:64:12:
80:9a:c9:88:f5:72:37:74:53:07:cf:b9:9b:4a:c3:d5:3d:e1:
8e:6c:b5:41:7d:05:79:39:dc:5b:b0:a0:48:9a:de:23:dc:b9:
44:a1:5b:8d:35:0c:3d:b7:73:a6:11:a9:ba:6c:7a:34:9e:74:
42:79:56:dc:da:7b:a4:3f:bd:63:28:cc:ef:c4:31:83:00:8d:
1c:aa:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:10 2025 by rpki-client